All Practice Exams

100+ Free CISI Risk in Financial Services Practice Questions

Pass your CISI Risk in Financial Services (IOC technical unit) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published by CISI Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

A central counterparty (CCP) reduces counterparty credit risk in cleared derivatives mainly by:

A
B
C
D
to track
2026 Statistics

Key Facts: CISI Risk in Financial Services Exam

100

Multiple-Choice Questions

CISI Risk in Financial Services Factsheet

2 hours

Exam Duration

CISI Risk in Financial Services Factsheet

70%

Pass Mark

CISI Risk in Financial Services Factsheet

10

Syllabus Elements

CISI Risk in Financial Services Syllabus

100 hrs

Recommended Study Time

CISI

IOC

Technical Unit

CISI IOC Factsheet

The CISI Risk in Financial Services exam has 100 multiple-choice questions to be answered in 2 hours, with a 70% pass mark (91-100 marks earns a Pass with merit). Up to 10% additional unscored trial questions may appear. The syllabus has ten elements with indicative question counts: Operational, Credit and Market risk (15 each), Principles of Risk Management (14), Investment Risk (11), Liquidity Risk (10), International Risk Regulation (7), Risk Oversight and Corporate Governance and ERM (5 each), and Model Risk (3). CISI recommends about 100 hours of study. The exam is a technical unit of the Investment Operations Certificate (IOC) and a stand-alone qualification.

Sample CISI Risk in Financial Services Practice Questions

Try these sample questions to test your CISI Risk in Financial Services exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In the standard risk management cycle, which step immediately follows risk identification?
A.Risk reporting
B.Risk assessment (measurement)
C.Risk acceptance
D.Risk transfer
Explanation: The classic risk management process runs identify, assess/measure, manage (treat), then monitor and report. After a risk is identified it must be assessed for likelihood and impact before any treatment decision can be made.
2A firm decides to stop offering a product line entirely because the associated risk is intolerable. Which of the four classic risk treatment responses is this?
A.Risk reduction (mitigation)
B.Risk transfer
C.Risk avoidance
D.Risk retention
Explanation: Avoidance means eliminating the activity that gives rise to the risk altogether. Withdrawing a product line removes the exposure rather than merely reducing or transferring it.
3Risk is most precisely defined in financial services as:
A.The certainty of a financial loss
B.The uncertainty of an outcome, which can be positive or negative
C.Any event that causes reputational damage
D.A breach of a regulatory rule
Explanation: Risk reflects uncertainty around an outcome relative to an objective. Although attention focuses on downside, risk encompasses upside (opportunity) as well as downside (threat).
4Which statement best distinguishes inherent risk from residual risk?
A.Inherent risk is the risk after controls; residual risk is before controls
B.Inherent risk is the risk before any controls; residual risk is what remains after controls are applied
C.Both terms describe the same level of risk
D.Residual risk only applies to operational risk
Explanation: Inherent (gross) risk is the exposure assuming no mitigating controls. Residual (net) risk is what is left once controls have been applied and is compared against risk appetite.
5On a typical risk matrix used to prioritise risks, the two axes represent:
A.Likelihood and impact
B.Cost and revenue
C.Frequency and regulatory category
D.Inherent and residual ratings
Explanation: A heat map or risk matrix plots probability (likelihood) against severity (impact). Risks in the high-likelihood, high-impact quadrant receive priority attention and resources.
6Which of the following is the clearest example of a systematic (market) risk that cannot be eliminated through diversification?
A.A single issuer defaulting on its bond
B.A factory fire at one company
C.A rise in central bank interest rates affecting the whole economy
D.Fraud by an individual trader
Explanation: Systematic risk arises from economy-wide factors such as interest rates, inflation and recession that affect all assets. Because it is market-wide, it cannot be diversified away, unlike specific (idiosyncratic) risk.
7The 'three lines of defence' model places ongoing risk management and control ownership primarily with:
A.The internal audit function
B.The board's audit committee
C.Business line management that owns and manages the risk
D.External auditors
Explanation: In the three lines model, the first line is operational/business management that owns and controls risk day to day. The second line (risk and compliance) oversees and challenges; the third line (internal audit) provides independent assurance.
8A key risk indicator (KRI) is best described as a metric that:
A.Reports a loss that has already crystallised
B.Provides an early-warning signal of changing risk exposure
C.Sets the firm's risk appetite
D.Calculates regulatory capital
Explanation: A KRI is a forward-looking metric that signals rising exposure before a loss occurs, allowing management to act early. Thresholds and trends trigger escalation when limits are approached.
9Which statement about the relationship between risk and reward is correct in a rational market?
A.Higher expected returns generally require accepting higher risk
B.Lower risk always produces higher returns
C.Risk and reward are unrelated
D.Reward decreases as risk increases
Explanation: The risk-reward trade-off states that investors demand higher expected returns to compensate for bearing greater risk. Risk-free assets offer the lowest return; riskier assets must offer a premium.
10A risk register is primarily used to:
A.Record and track identified risks, their owners, controls and status
B.Hold the firm's regulatory capital
C.List approved counterparties
D.Replace the internal audit plan
Explanation: A risk register is a structured document capturing each identified risk, its assessment, owner, controls, treatment actions and current status. It is a core tool for tracking and reporting risk.

About the CISI Risk in Financial Services Exam

CISI Risk in Financial Services is a technical unit of the Investment Operations Certificate and a stand-alone risk qualification. It tests principles of risk management, international risk regulation, operational, credit, market, investment, liquidity and model risk, risk oversight and corporate governance, and enterprise risk management through 100 multiple-choice questions.

Questions

100 scored questions

Time Limit

2 hours

Passing Score

70% (Pass 70-90 marks; Pass with merit 91-100 marks)

Exam Fee

CISI exam enrolment fee shown at booking; confirm the current price on the CISI website (Chartered Institute for Securities & Investment (CISI))

CISI Risk in Financial Services Exam Content Outline

14%

Principles of Risk Management

Definition of risk, risk and reward, the risk management cycle, the four Ts of risk treatment, inherent and residual risk, risk matrices, key risk indicators, and risk culture foundations.

7%

International Risk Regulation

Basel Committee standards, the three Basel pillars, capital and leverage requirements, Solvency II for insurers, the Financial Stability Board, systemic institutions, and ICAAP.

15%

Operational Risk

Basel definition, loss event taxonomy, RCSA, internal loss data, outsourcing and third-party risk, business continuity, cyber, conduct, legal and reputational risk, and operational resilience.

15%

Credit Risk

Default, expected loss, PD, LGD and EAD, collateral, concentration, counterparty and wrong-way risk, central counterparties, netting, credit ratings, credit derivatives, and IFRS 9 ECL.

15%

Market Risk

Interest rate, equity, currency and commodity risk, Value at Risk and Expected Shortfall, duration and convexity, hedging, basis risk, option Greeks, IRRBB, and trading versus banking book.

11%

Investment Risk

Systematic and specific risk, diversification and correlation, Sharpe ratio, CAPM and beta, suitability and risk tolerance, tracking error, asset liquidity, and behavioural finance biases.

10%

Liquidity Risk

Funding and asset liquidity risk, maturity transformation, high-quality liquid assets, the LCR and NSFR, bank runs, contingency funding plans, funding diversification, and lender of last resort.

3%

Model Risk

Model error and misuse, independent model validation, model governance and documentation, and the dangers of over-reliance on a single model in stressed conditions.

5%

Risk Oversight and Corporate Governance

Board responsibility, risk appetite ownership, board risk committees, the Chief Risk Officer, the three lines of defence, risk reporting, and risk-aligned remuneration.

5%

Enterprise Risk Management

Integrated firm-wide risk management, COSO ERM and ISO 31000 frameworks, risk appetite statements, risk aggregation and correlation, and embedding ERM into strategy and culture.

How to Pass the CISI Risk in Financial Services Exam

What You Need to Know

  • Passing score: 70% (Pass 70-90 marks; Pass with merit 91-100 marks)
  • Exam length: 100 questions
  • Time limit: 2 hours
  • Exam fee: CISI exam enrolment fee shown at booking; confirm the current price on the CISI website

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

CISI Risk in Financial Services Study Tips from Top Performers

1Allocate study time using the element weightings: Operational, Credit and Market risk carry the most questions at about 15 each.
2Learn the core formulas, including Expected Loss as PD times LGD times EAD and the meaning of a VaR confidence level.
3Memorise the regulatory anchors: the three Basel pillars, the 30-day LCR, the one-year NSFR, and Solvency II for insurers.
4Practise distinguishing the four risk types, so you can correctly label an event as credit, market, operational or liquidity risk.
5Use timed 100-question mocks to rehearse the 2-hour pace and confirm you are consistently above the 70% pass mark.
6Keep an error log tagged by syllabus element to focus revision on your weakest of the ten areas.

Frequently Asked Questions

How many questions are on the CISI Risk in Financial Services exam?

The exam has 100 multiple-choice questions answered in 2 hours. CISI may add up to 10% additional unscored trial questions, which are not counted toward your result.

What is the pass mark for CISI Risk in Financial Services?

The pass mark is 70%. CISI awards a Pass for 70-90 marks and a Pass with merit for 91-100 marks, while 0-69 marks is a fail.

How long is the CISI Risk in Financial Services exam?

The exam lasts 2 hours. With 100 scored multiple-choice questions, that allows roughly one minute per question, plus time for any trial questions.

Is Risk in Financial Services part of the Investment Operations Certificate?

Yes. Risk in Financial Services is a technical unit of the CISI Investment Operations Certificate (IOC) and can also be taken as a stand-alone risk qualification.

How much study time does CISI recommend?

CISI recommends around 100 hours of study for Risk in Financial Services, though some training providers suggest up to roughly 154 hours depending on your background.

What topics does the Risk in Financial Services syllabus cover?

The syllabus has ten elements: principles of risk management, international risk regulation, operational, credit, market, investment, liquidity and model risk, risk oversight and corporate governance, and enterprise risk management.

Is the CISI Risk in Financial Services exam computer-based?

Yes. It is a computer-based, on-demand multiple-choice exam booked through CISI, with test-centre and remote-invigilation options available in many locations.

Can I retake the CISI Risk in Financial Services exam?

Yes. If you do not reach the 70% pass mark you can re-book and resit the exam, paying a further exam enrolment fee.